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ABSTRACT 


For security of the data as well as maintaining privacy over the internet, authentication is used. For this the password 1s used but the user uses small password, easy to 
memorize password or password which can be guessed easily. People use personal information as their password for easy memorization. In this paper, we analysis the 
various passwords from the leaked dataset to research their personal information for finding the relation between them and the password. We use Probabilistic Context- 
Free Grammars (PCFG) method with semantic-rich method to propose Personal-PCFG method. This method will help us to crack the password much faster than the 
PCFG method which increases the chances of successful password crack. To protect user from this type of attacks we use distortion function. 
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1. INTRODUCTION: 

Network security sometime is calling the InfoSec i.e. information Security. 
Information security is the no of strategies for the extract the process. Tools. It's 
required the varies policies necessary to prevent, detect document and find the 
threats to digital and non-digital information. Information security is the respon- 
sible for a set of business processes that provide security to information assets. It 
secures all the business and personal information. 


Information security threats come in large quantity in different forms. Some of 
the most common threats today are software attacks, theft of intellectual prop- 
erty, identity theft, theft of equipment or information, sabotage, and information 
extortion. Most people have experienced software attacks of some sort. Viruses, 
worms, phishing attacks, and Trojan horses are a few common examples of soft- 
ware attacks. The theft of intellectual property has also been an extensive issue 
for many businesses in the IT field. Identity theft is the attempt to act as someone 
else usually to obtain that person's personal information or to take advantage of 
their access to vital information. Theft of equipment or information is becoming 
more prevalent today due to the fact that most devices today are the main objec- 
tive is to help user to choose strong password which will be difficult for the 
hacker to crack password. User mostly use easy password for its memorization. 
Mostly this password contains personal information which makes it vulnerable. 
Hacker can get user information from various sources like Facebook. This infor- 
mation can be used by hacker for guessing password. 


The prime focus of this is to help user to choose strong password. Mostly people 
use their information in passwords. Hackers can get the peoples information 
from various sources like Social Networking Site. This information can be used 
to guess user passwords. If the user's password does not contain personal infor- 
mation then itis difficult for the hacker to crack the password. 


2. MATERIALS AND METHODS: 

In this system user enters the personal information and enter the Username and 
Password. First the user system take password information and search into the 
user fill the information. Then it's finding the correlation of that password by 
using the PCFG algorithm. After that by using the simple Distortion function 
user enter password to Mix with dictionary of password and providing the strong 
password to the user. 


Proposed Algorithm : 

1) Input: All Personal Information and Password 
2) Output: Strong Password 

3) Collect all the information and password 


4) Find Correlation between the information and password using Probability 
Context Free Grammar with sematic rich algorithm 


5) Ifthe password contains the user's personal information and weak password 
then the user has to create password. If the password is strong then password 
will be mixed with the complicate password from the dictionary. 


6) Thestrong password will be mailed to the user. 
3. RESULT: 


To Secure User's Web Accounts from hackers and some attacks like bruteforce or 
dictionary attacks by providing strong password. 


e  Itwill protect users account from various attacks. 
¢  Itwillincrease password security. 


¢  Itwillimprove online authentication systems. 


4. DISCUSSION: 

The motivation of this paper is to increase the password security, as many 
researchers have proposed different authentication mechanisms, but no alterna- 
tive can bring all the benefits of passwords without introducing extra burdens to 
users. Many times user used to give password which will be easily memorized or 
related to the user's personal information, but at the same time it would be benefit 
for the hacker who can easily hack the password by using the personal informa- 
tion of the user. Therefore to increase the security of the application we have pro- 
posed this paper which will be used to secure application by giving the strong 
password to the user. In this Strong password will be send to the valid users so 
that only valid user can authenticate the application by entering the strong pass- 
word to the application. In this we assess the usage of names in other leaked pass- 
word datasets that do not come with any personal information. To demonstrate 
the security vulnerability induced by using personal information in passwords, 
we propose a semantics-rich Probabilistic Context- Free Grammars (PCFG) 
method called Personal-PCFG, which extends PCFG by considering personal 
information symbols in password structures. We present simple distortion func- 
tions to defend against these semantics-aware attacks such as Personal-PCFG. 
Our evaluation results demonstrate that distortion functions can effectively pro- 
tect passwords by significantly reducing the unwanted correlation between per- 
sonal information and passwords. 


5. CONCLUSION: 

In this paper we are providing security to the application, to systematically ana- 
lyze personal information in passwords. In many application users provide their 
personal information to the system while registration, Sometimes users to 
include their name in passwords, since it will be easier for the hacker to hack the 
password by using their personal detail. Therefore this paper introduced serious 
involvement of personal information in password creation, which makes a user 
password more vulnerable to a targeted password cracking. Therefore in this 
paper we develop Personal-PCFG based on PCFG which consider more seman- 
tic symbols for cracking a password. Personal-PCFG generates personalized 
password guesses by integrating personal information in the guesses. We also pro- 
pose using distortion functions to protect weak passwords that include personal 
information. Our experimental results that Personal-PCFG is faster than PCFG 
in password cracking and eases the feasibility of mounting online attacks 
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